Adrien Raffin is an experienced SRE engineer based in Brittany, France, with 12 years in infrastructure, reliability engineering, and backend operations. At Sekoia he focuses on solving backend reliability issues, deploying scalable applications, and system administration across production environments. He brings practical DevOps and backend experience from prior roles at Amossys and sustained open-source contributions to projects like headscale and Netmaker, where he implemented ACL filtering and improved WireGuard-based netclient functionality. His work shows a strong emphasis on secure, network-aware systems and pragmatic tooling improvements that reduce friction for deployments and node management. Adrien often operates at the intersection of reliability and networking, turning complex ACL and hostname management requirements into tested, production-ready features. Colleagues know him for steady delivery, attention to test coverage, and making networking tooling behave more like production-grade services.
An open source, self-hosted implementation of the Tailscale control server
Role in this project:
Back-end Developer
Contributions:60 reviews, 124 commits, 16 PRs in 8 months
Contributions summary:Adrien's contributions primarily focused on implementing access control list (ACL) features within the `headscale` project. They introduced an ACLFilter to manage namespaces and filter hosts based on ACL rules, which changed the default behavior to align more closely with Tailscale. The user added various functions to support these features, including methods to get and filter peers by ACLs, generate ACL rules, and expand aliases. Additionally, they added tests to validate the correct functioning of the ACL rules based on the defined ACL policy.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
Role in this project:
Back-end & DevOps Engineer
Contributions:9 commits, 4 PRs, 11 comments in 20 days
Contributions summary:Adrien primarily contributed to the Netmaker project by implementing features and improving the netclient component. They added functionality such as listing nodes with hostnames, adding the current hostname by default when joining a network, and filtering the list command by network. Furthermore, they worked on config file cleanup for Linux systems and made improvements to the netclient install script, including allowing the setting of a custom hostname during installation. They also fixed errors returned by the list command.
automatesnetmakercnizero-trustvirtual-networking
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.